Chainreaction raises $449K seed to rewrite how security is priced
What's the deal? ChainreactionDealroom has a profile for this one. Try Dealroom →, a Chinese offensive-security startup, has raised a seed round of US$412.5K. Investors include threatbook (微步在线) and parties linked to Jing'an Technology. The money will fund research and development, a market team, and infrastructure.
What does it do? Founded in August by Ke Yu, a former white-hat hacker, chainreaction builds "pre-emptive" security tools that simulate attacker behaviour to find weaknesses before systems are breached. Its October product, CYBER·AI黑客, is a SaaS automated penetration system covering the full attack lifecycle, from reconnaissance to post-exploitation.
Why now? AI is making cyberattacks cheaper and faster. CrowdStrike's 2026 global threat report found AI-enabled attacker activity rose 89% year-on-year in 2025, with average breakout time falling to 29 minutes.
What's the endgame? Chainreaction wants security products to be sold "like model vendors," per the company. It is testing token-based pricing: clients buy tokens from model vendors, plug into its platform, and pay by usage. The aim is to drop marginal delivery costs near zero and serve smaller firms with annual budgets of only tens of thousands of yuan.
Ke, born in 1998, founded the open-source community ChainReactors in 2021. Its red-team scanning engine, gogo, drew roughly 2,000 stars and 200 forks on GitHub. The startup plans to keep open source and commercial products in parallel, saying the open version reaches about 80% of the paid product's capability. Threatbook, built on threat intelligence and AI security operations, is positioned as a technical complement.
What could go wrong? The business model is the most uncertain part. Of 100 trial users surveyed, about 70% said they would accept token pricing, but final prices are undecided, and Ke concedes that scaling and cross-industry validation remain unproven. The open-source commitment also stakes the company's moat on the pace of its technical iteration.
Chainreaction is also skipping a traditional sales team, relying instead on open-source community growth, benchmark results, and social media. Ke says nearly all current customers converted through ChainReactors.
The signal: QYResearch put China's vulnerability assessment and penetration testing market at about US$3.67B in 2024, though much of that is compliance-driven scanning rather than the automated offensive work chainreaction targets. The 10-person startup is an early test of whether open-source credibility, usage-based billing, and de-customised selling can reshape security pricing in the AI era.
Read more: 36kr.com
Image credit: Generated with Gemini
